CVE-2024-11482: Trellix Enterprise Security Manager

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection, executed as the root user.

Affected products

• Trellix Enterprise Security Manager: version 11.6.10 only

Published 2024-11-29. Last modified 2026-06-17.